Security Visualization Extended Review Issues, Classifications, Validation Methods, Trends, Extensions

Abstract

Security visualization has been an issue, and it continues to grow in many directions. In order to give sufficient security visualization designs, information both in many different aspects of visualization techniques and the security problems is required. More beneficial designs depend on decisions that include use cases covering security artifacts and business requirements of the organizations, correct and optimal use of data sources, and selection of proper display types. To be able to see the big picture, the designers should be aware of available data types, possible use cases and different styles of displays. In this chapter, these properties of a large set of earlier security visualization work have been depicted and classified using both textual and graphical ways. This work also contains information related to trending topics of the domain, ways of user interaction, evaluation, and validation techniques that are commonly used for the security visualization designs.

Holistic Web Application Security Visualization for Multi-Project and Multi-Phase Dynamic Application Security Test Results

“…Özdemir Sönmez and Günel made a detailed gap analysis for the security visualization domain [14]. This survey study included a detailed investigation of around 80 security visualization studies that were selected among about one thousand earlier studies from the Web of Science database.…”

“…showing the visualizations based on data generated using OWASP Zed Attack Proxy (ZAP) tool together with some user-generated sample data as an improvement to the existing web application security vulnerability reporting systems. Few studies focus on the visualization of web application vulnerability scan results in the security visualization domain [14]. The only existing study which targets web application security black-box test results enables visualization of statistical measures.…”